Egregoros

About 75% of Schneier's articles lately have been about LLMs being pwned and/or doing the pwning.

https://www.schneier.com/blog/archives/2026/02/the-promptware-kill-chain.html

@toiletpaper openclaw is going to be the vector for unbelievably devastating attacks in the near future, it's such a pile of shit

@sun

I use some LLMs etc on my machine, both local and cloud based, but if they have any agentic functionality whatsoever it only happens in an isolated VM. Based on experience there's zero chance I'm ever letting any of these things touch my main system.

@toiletpaper if you want your agent to do almost anything you have to give it api keys or auth tokens. that's the premise of openclaw, you give it a shitload of access to your life and it manages things for you. so you give it your email, chat, calendar, everything, all glommed together on a box with no privilege separation and the llm has complete access to it all